Authentication Security Best Practices

(4 reviews)

unknown-security-scheme

general > unknown-security-scheme


Guidance

One or more global security schemes in your API allows setting HTTP authentication methods that are not included
in IANA Authentication Scheme Registry.

This is a potential risk, because the definition is in security schemes. However, it easily turns into an actual
risk when the unsafe method is used in a security requirement.

Applies to SecurityScheme

Constraint

Type: Declarative Validation

Reviews

TypeRuleset
OrganizationMuleSoft
Published by
MuleSoft Organization
Published onApr 25, 2022
Asset overview

Asset versions for 1.0.x

Asset versions
VersionActions
1.0.0